10025—Information Disclosure - Sensitive Information in HTTP Referrer Header
PUBLISHEDsecurity alertInformational
Passive
Metadata
摘要
The HTTP header may have leaked a potentially sensitive parameter to another domain. This can violate PCI and most organizational compliance policies. You can configure the list of strings for this check to add or remove values specific to your environment.
解决方案
Do not pass sensitive information in URIs.
其他信息
The URL in the HTTP referrer header field appears to contain US Social Security Number(s).